{"id":"CVE-2017-11403","aliases":["DEBIAN-CVE-2017-11403","DLA-1045-1","DLA-1456-1","DSA-4321-1","EUVD-2017-3030","GHSA-2gx9-pfxr-fgh5","MGASA-2017-0229","MGASA-2018-0229","SUSE-SU-2017:2176-1","SUSE-SU-2017:2199-1","SUSE-SU-2017:2229-1","UBUNTU-CVE-2017-11403","USN-4206-1"],"status":"published","title":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob...","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.2831,"percentile":0.98132,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2017-07-18T00:00:00Z","modified":"2026-09-01T20:02:40Z","fixes":[{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.3.26-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.3.26-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.3.26-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.16-1.1+deb7u8"}]}],"versions":["1.3.16-1.1","1.3.16-1.1+deb7u1","1.3.16-1.1+deb7u2","1.3.16-1.1+deb7u3","1.3.16-1.1+deb7u4","1.3.16-1.1+deb7u5","1.3.16-1.1+deb7u6","1.3.16-1.1+deb7u7"],"bundled":10},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u4"}]}],"versions":["1.3.20-3+deb8u1","1.3.20-3+deb8u2","1.3.20-3+deb8u3"],"bundled":31},{"source":"osv","ecosystem":"Debian:9","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.30+hg15796-1~deb9u1"}]}],"versions":["1.3.25-8","1.3.26-1","1.3.26-10","1.3.26-11","1.3.26-12","1.3.26-13","1.3.26-14","1.3.26-15","1.3.26-16","1.3.26-17","1.3.26-18","1.3.26-19","1.3.26-2","1.3.26-3","1.3.26-4","1.3.26-5","1.3.26-6","1.3.26-7","1.3.26-8","1.3.26-9","1.3.27-1","1.3.27-2","1.3.27-3","1.3.27-4","1.3.28-1","1.3.28-2","1.3.29+hg15665-1","1.3.29-1","1.3.30-1"],"bundled":56},{"source":"osv","ecosystem":"Mageia:5","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-1.1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:6","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-1.1.mga6"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:6","package":"converseen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6.2-1.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"cuneiform-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-9.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"dvdauthor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.5-8.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.9.41-1.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.92.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"k3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0.5-5.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"kxstitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"libopenshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-1.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ocaml-glmlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.03.51-17.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"perl-Image-SubImageFind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pfstools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-imagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-magickwand","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"psiconv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-26.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pythonmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-7.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ruby-rmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.4-12.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"synfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinelchi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-8.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinenigmang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.5.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.5.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.5.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.5.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm2"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.2"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.2"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1"],"bundled":10}],"products":[{"vendor":"graphicsmagick","product":"graphicsmagick"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4321","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","VDB Entry","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://usn.ubuntu.com/4206-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11403"},{"url":"https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c"},{"url":"https://usn.ubuntu.com/4206-1"},{"url":"https://github.com/advisories/GHSA-2gx9-pfxr-fgh5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-11403","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0229.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19668","tags":["report"]},{"url":"http://www.graphicsmagick.org/NEWS.html#july-4-2017","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472214","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0229.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19078","tags":["report"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/ImageMagick-6/ChangeLog","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172176-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042826","tags":["report"]},{"url":"https://bugzilla.suse.com/1043289","tags":["report"]},{"url":"https://bugzilla.suse.com/1049072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9501","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172199-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042812","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9440","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172229-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1036985","tags":["report"]},{"url":"https://bugzilla.suse.com/1050611","tags":["report"]},{"url":"https://bugzilla.suse.com/1050674","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8350","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-11403","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4206-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14042","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-11403","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:00:00Z","modified":"2024-08-05T18:05:30.603Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-3030","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:00:00Z","modified":"2024-08-05T18:05:30Z","updated_at":"2026-11-03T02:23:23.645757Z"}],"ghsa":[{"id":"GHSA-2gx9-pfxr-fgh5","title":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob...","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2022-05-14T02:20:36Z","modified":"2025-04-20T03:42:02Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:01:49.538564Z"}],"nvd":[{"id":"CVE-2017-11403","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:29:00.183Z","modified":"2026-06-17T01:01:45.11Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"CVE-2017-11403","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:29:00.183Z","modified":"2026-04-16T06:19:17.977396192Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-11403","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:29:00.183Z","modified":"2026-09-01T20:02:40.313459562Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-11403","description":"The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","status":"published","published":"2017-07-18T00:29:00Z","modified":"2026-04-22T11:10:11.594437Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1045-1","title":"graphicsmagick - security update","status":"published","published":"2017-07-30T00:00:00Z","modified":"2026-03-09T01:01:28.348208Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1456-1","title":"graphicsmagick - security update","status":"published","published":"2018-08-02T00:00:00Z","modified":"2026-03-09T01:01:52.904399Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4321-1","title":"graphicsmagick - security update","status":"published","published":"2018-10-16T00:00:00Z","modified":"2026-03-09T02:11:06.805314Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2017-0229","title":"Updated graphicsmagick packages fix security vulnerabilities","description":"New stable upstream release including security fixes for CVE-2016-7800,\nCVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684,\nCVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799,\nCVE-2017-10800, CVE-2017-11403 and possibly several other security issues\nwith and without associated CVE number.\n","status":"published","published":"2017-07-30T15:58:51Z","modified":"2026-04-16T06:26:18.465505891Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2018-0229","title":"Updated imagemagick packages fix security vulnerabilities","description":"The imagemagick package has been updated to version 6.9.9.41 which\nfixes several unspecified security vulnerabilities.\nThis update fixes several vulnerabilities in imagemagick, including:\nVarious memory handling problems and cases of missing or incomplete\ninput sanitising may result in denial of service, memory disclosure\nor the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF,\nPCX, JPG or SFW files are processed.\n\nSeveral packages have been rebuilt for the updated ImageMagick.\n","status":"published","published":"2018-05-12T06:28:12Z","modified":"2026-04-16T06:25:36.607120995Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:2176-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826)\n- CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289)\n- CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting\n  in a use-after-free via acrafted file (bsc#1049072)\n\n","status":"published","published":"2017-08-16T10:28:11Z","modified":"2026-02-04T03:52:42.977246Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2199-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826)\n- CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c (bsc#1042812)\n- CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289)\n- CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting\n  in a use-after-free via acrafted file (bsc#1049072)\n","status":"published","published":"2017-08-17T06:40:29Z","modified":"2026-02-04T03:53:03.90491Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2229-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-8350: The PNG/JNG decoder recieved an incremental fix, fixing some related issues in the\n  same code. (bsc#1036985)\n- CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826)\n- CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289)\n- CVE-2017-11403: The ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting\n  in a use-after-free via a crafted file (bsc#1049072)\n- CVE-2017-11643: A heap overflow in WriteCMYKImage()function in coders/cmyk.c was fixed (bsc#1050611)\n- CVE-2017-11636: A heap overflow in WriteRGBImage() in coders/rgb.c was fixed (bsc#1050674)\n\n","status":"published","published":"2017-08-22T11:11:43Z","modified":"2026-02-04T04:16:27.346003Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-4206-1","title":"graphicsmagick vulnerabilities","description":"It was discovered that GraphicsMagick incorrectly handled certain image files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2017-10794, CVE-2017-10799, CVE-2017-11102, CVE-2017-11140,\nCVE-2017-11403, CVE-2017-11636, CVE-2017-11637, CVE-2017-13147, CVE-2017-14042,\nCVE-2017-6335)\n","status":"published","published":"2019-12-02T19:46:55Z","modified":"2026-04-22T09:49:57.168654Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}